[util**ca** Trojan-downloader Ad.pack] 설치 및 삭제로그 : 148ms

프로그램분석

[utilca Trojan-downloader Ad.pack] 설치 및 삭제로그 : 148ms

프로세스 천국 2011. 8. 27. 21:02

----------------------------------------------------------------------
Created by Windowexe.com , Logfile of WindowexeAllkiller
----------------------------------------------------------------------
Microsoft Windows XP Service Pack 3(5.1.2600.196608)
Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz / 767.48 MB
x86 Family 6 Model 37 Stepping 5
Date : 2011-08-27
----------------------------------------------------------------------
DF000 C:\Documents and Settings\Administrator\Application Data\MSINET.OCX
DF001 C:\Documents and Settings\Administrator\Application Data\msvbvm60.dll
DF002 C:\Documents and Settings\Administrator\Application Data\scrrun.dll
DF003 C:\Documents and Settings\Administrator\Application Data\utilpung.exe
DF004 C:\Documents and Settings\Administrator\Application Data\VB6KO.DLL
DF005 C:\Documents and Settings\Administrator\바탕 화면\dzone.exe
DF006 C:\Documents and Settings\Administrator\바탕 화면\GuideOn__GO20.exe
DF007 C:\Documents and Settings\Administrator\바탕 화면\PostTip_ziodio.exe
DF008 C:\Documents and Settings\Administrator\바탕 화면\Setup_utilcafe_BoanPack.exe
DF009 C:\Documents and Settings\Administrator\바탕 화면\Setup_utilcafe_VLite.exe
DF010 C:\Documents and Settings\Administrator\바탕 화면\shotcut6.exe
DF011 C:\Documents and Settings\Administrator\바탕 화면\SmartTool__SM19.exe
DF012 C:\Documents and Settings\Administrator\바탕 화면\todaytab_util.exe
DF013 C:\Documents and Settings\Administrator\바탕 화면\utilpungUP.exe
DF014 C:\Documents and Settings\Administrator\바탕 화면\withmoa_hidden_20101223.exe
DF015 C:\Program Files\BoanPack 3.0\baphis.dll
DF016 C:\Program Files\BoanPack 3.0\bapidc.dll
DF017 C:\Program Files\BoanPack 3.0\BoanPack.exe
DF018 C:\Program Files\BoanPack 3.0\BoanPackMT.exe
DF019 C:\Program Files\BoanPack 3.0\BoanPackUI.exe
DF020 C:\Program Files\BoanPack 3.0\BoanPackUp.exe
DF021 C:\Program Files\BoanPack 3.0\Uninstall.exe
DF022 C:\Program Files\GuideOn\GuideOn.dll
DF023 C:\Program Files\GuideOn\GuideOn.exe
DF024 C:\Program Files\GuideOn\uninstall.exe
DF025 C:\Program Files\NewSink\NewSink.exe
DF026 C:\Program Files\NewSink\sinkup.exe
DF027 C:\Program Files\NewSink\UnInstall.exe
DF028 C:\Program Files\PostTip\PostTip.dll
DF029 C:\Program Files\PostTip\PostTip.exe
DF030 C:\Program Files\PostTip\uninstall.exe
DF031 C:\Program Files\SmartTool\SmartTool.dll
DF032 C:\Program Files\SmartTool\SmartTool.exe
DF033 C:\Program Files\SmartTool\Uninstall.exe
DF034 C:\Program Files\VLite 3.0\mfc42.dll
DF035 C:\Program Files\VLite 3.0\msvcirt.dll
DF036 C:\Program Files\VLite 3.0\msvcp60.dll
DF037 C:\Program Files\VLite 3.0\msvcrt.dll
DF038 C:\Program Files\VLite 3.0\Uninstall.exe
DF039 C:\Program Files\VLite 3.0\VLite.exe
DF040 C:\Program Files\VLite 3.0\VLiteUp.exe
DF041 C:\Program Files\VLite 3.0\VLiteUp2.exe
DF042 C:\Program Files\VLite 3.0\vtehis.dll
DF043 C:\Program Files\VLite 3.0\vtehrd.dll
DF044 C:\Program Files\VLite 3.0\vtemrd.dll
DF045 C:\Program Files\VLite 3.0\vtemwnt.dll
DF046 C:\Program Files\VLite 3.0\vtemwt.dll
DF047 C:\Program Files\VLite 3.0\vtereg.dll
DF048 C:\Program Files\VLite 3.0\vtestc.dll
DF049 C:\Program Files\VLite 3.0\vtesvc.exe
DF050 C:\Program Files\VLite 3.0\vtesys.dll
DF051 C:\Program Files\VLite 3.0\vteupk.dll
DF052 C:\Program Files\VLite 3.0\vteupt.dll
DF053 C:\Program Files\WithMoa\uninstall.exe
DF054 C:\Program Files\WithMoa\widlib.dll
DF055 C:\Program Files\WithMoa\widmoa.dll
DF056 C:\Program Files\WithMoa\widservice.exe
DF057 C:\Program Files\WithMoa\withmoa.exe
DF058 C:\Program Files\WithMoa\withmoaun.exe
DF059 C:\WINDOWS\system32\withmoaAX.ocx
----------------------------------------------------------------------
SC060 vtesvc -/- VLite Security Service -/- - -/- -/- C:\Program Files\VLite 3.0\vtesvc.exe
----------------------------------------------------------------------
UN061 BoanPack 3.0 -/- - -/- BoanPack 3.0 -/- - -/- -
UN062 GuideOn -/- - -/- GuideOn -/- - -/- -
UN063 remove NewSink -/- - -/- NewSink -/- - -/- -
UN064 PostTip -/- - -/- PostTip -/- - -/- -
UN065 SmartTool 제거 -/- - -/- SmartTool -/- - -/- -
UN066 VLite 3.0 -/- - -/- VLite 3.0 -/- - -/- -
UN067 WithMoa Totalpack 32bit -/- - -/- widmoa uninstall -/- - -/- -
----------------------------------------------------------------------
LS068 NewSink -/- C:\Program Files\NewSink\NewSink.exe
LS069 SinkUp -/- C:\Program Files\NewSink\sinkup.exe
LS070 BoanPack 3.0 -/- C:\Program Files\BoanPack 3.0\BoanPack.exe -h -boot
LS071 VLite 3.0 -/- C:\Program Files\VLite 3.0\VLite.exe -h -boot
LS072 GuideOn -/- C:\Program Files\GuideOn\GuideOn.exe
LS073 PostTip -/- C:\Program Files\PostTip\PostTip.exe
LS074 SmartTool -/- C:\Program Files\SmartTool\SmartTool.exe
LS075 utilpung -/- C:\Documents and Settings\Administrator\Application Data\utilpung.exe
LS076 widmoa -/- C:\Program Files\WithMoa\withmoa.exe
----------------------------------------------------------------------
BH077 SmartToolCtl Class -/- C:\Program Files\SmartTool\SmartTool.dll -/- {2D891923-34B7-4186-9B47-752624535DC1}
BH078 widhmoa Object -/- C:\Program Files\WithMoa\widmoa.dll -/- {46ABCABA-C7AF-49DF-92D8-A24EA2C9E9B4}
BH079 GuideHelper Class -/- C:\Program Files\GuideOn\GuideOn.dll -/- {6704E2EA-6213-4d17-BB3D-4AE9E3609536}
BH080 PostTip -/- C:\Program Files\PostTip\PostTip.dll -/- {C4BF6897-41A2-454b-AC3B-437F30BEA671}
----------------------------------------------------------------------
Deleted Files : 60
Remove Service : 1
Remove Uninstall Entry : 7
Remove Startup Entry : 9
Remove Browser Helper Object : 4
----------------------------------------------------------------------
Remove these Entry in a WindowexeAllkiller.txt file. Save and Run.
[02-HKLMREG]**NewSink
[02-HKLMREG]**SinkUp
[02-HKLMREG]**BoanPack 3.0
[02-HKLMREG]**VLite 3.0
[02-HKLMREG]**GuideOn
[02-HKLMREG]**PostTip
[02-HKLMREG]**SmartTool
[02-HKLMREG]**utilpung
[02-HKLMREG]**widmoa
[03-BHOCLSD]**{2D891923-34B7-4186-9B47-752624535DC1}
[03-BHOCLSD]**{46ABCABA-C7AF-49DF-92D8-A24EA2C9E9B4}
[03-BHOCLSD]**{6704E2EA-6213-4d17-BB3D-4AE9E3609536}
[03-BHOCLSD]**{C4BF6897-41A2-454b-AC3B-437F30BEA671}
[05-SERVICE]**vtesvc
----------------------------------------------------------------------
Total Processing Time : 148ms
----------------------------------------------------------------------